--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Migration upgrade reference information # Migration upgrade reference information {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Lists and tables of scheduled jobs, table deprecations, and new columns added to existing tables for migration to Security Exposure Management Workspace. ## Scheduled jobs {#sem-migration-prereq-reference-data__section_u4y_gty_hgc} Deactivate the scheduled jobs and scheduled jobs within integration-specific scopes for the Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance applications. * Adding vulnerability and test fields for remediation tasks * Associate existing AVIs with Auto Exception Rule * Associate existing VIs with Auto Exception Rule * Calculate Related VI Counts for Application Remediation Task * Calculate Related VI Counts for Remediation Task * Calculate Related VI Counts for Vulnerabilities * Check Risk Mitigation Expiration * Check Vulnerable Item and Groups Deferment Expiration * Copy customized request exception questionnaire to compensating control * Evaluate remediation targets * Generate remediation digest * Insert classic Remediation tasks Into Unified Remediation Task * Migrate the background jobs * Populate Approval Source * Populate CC Number, Configuration Item and Business criticality into Unified Remediation Task Table * Populate Container Number,Configuration and Business criticality into Unified Remediation Task Table * Populate risk fields for risk rules * Populate Vulnerable CIs table - Delete and Re-populate * Populate Vulnerable CIs table - Delete and Re-populate for Test Results * Populate Vulnerable CIs table - from Vulnerable CI manifest table * Re-open deferred remediation tasks * Reapply all vulnerability assignment rules * Reassignment count for assignment rules * Refresh and resolve duplicate VITs on remediation task * Refresh associated Application vulnerable items for non-VGR based VG * Refresh associated vulnerable items for non-VGR based VG * Remove Duplicate VI Remediation Status * Repair erroneous Vulnerable Items Last Opened and Closed * Rerun calculators * Rolldown state from vulnerability group to vulnerable item * Rolldown until date from vulnerability group to vulnerable item * Rollup application vulnerable item values to vulnerability and group * Rollup VI values to vulnerability, Remediation Task (RT), and VI count on RT * Run severity calculator after vuln entry promotion * Send unassignment notification * Set deferral counts * Set related CI services for VI * Update age closed for VITs and AVITs * Update all old tags to remediation task table * Update is_in_group on Vulnerable Items * Update Last Open Detection Value To VITs * Update Remediation tasks with rolled up states(AVR) * Update Remediation tasks with rolled up states(VR) * Update risk rating for vulnerability solutions * Update Ungrouped Vulnerable Items * Update Vulnerability on VG * Vulnerability Response Age Closed Update * Vulnerability Response CI count * Vulnerability Response Risk and Remediation Status Upgrade * Add default values for last_opened_dt_tm from last_opened * Adding TR's CIs to service m2m table * Associate existing Container VIs with Auto Exception Rule * Associate existing TRs with Auto Exception Rule * Auto-close Rule Processor * Auto-Close Stale Test Results * Calculate Business Criticality for CVIT * Calculate Related CVIT Counts for Vulnerabilities * Calculate Related VI Counts for Container Remediation Task * Calculate remediation metrics for all the remediation tasks * Calculate remediation metrics for all the tests * Check Container Vulnerable Item Deferment Expiration * Check Remediation Tasks and Test Result Deferment Expiration * Delete inactive groupBys * Evaluate and notify remediation targets * Insert Remediation Tasks Into Unified Remediation Task * Populate existing test result fields * Process test result manifest records * Re-apply CI Lookup Rules on the Changed Discovered items * Reapply all assignment rules * Reapply CI lookup rules * Reassess the state of the remediation tasks * Reassignment count for assignment rules - CC * Reconcile unmatched discovered items * Refresh App related Saved filters * Refresh CC related Saved filters * Refresh Container related Saved filters * Refresh Host related Saved filters * Remove Groups from Exception Rules * Rollup container vulnerable item values to vulnerability and group * Rollup Risk scores to Organization * Rollup test result values to remediation task and configuration test * Send unassignment notification - CC * Set deferral counts * Trigger aggregation creation and running for saved filter * Update age closed for CC * Update age closed for CVITs * Update all old tags to compliance remediation task table * Update all old tags to container remediation task table * Update Awaiting Implementation state on CVITs * Update remediation metrics * Update remediation status for stale test results * Update Remediation tasks with rolled up states (CC) * Update Remediation tasks with rolled up states (CVR) * Update Risk Rating for Test Results * Update Rollup risk score for all non closed Result groups and Configuration tests * Update Saved Filter Aggregations * Vulnerability Response Container Count {#sem-migration-prereq-reference-data__ul_kxn_qky_hgc} USEM Data Model changes. {#sem-migration-prereq-reference-data__table_wtr_bpy_hgc__entry__2} | Deprecated tables | New tables | |-|-| | Vulnerability Assignment Rule (sn_vul_assignment_rule) | Assignment Rule (sn_sec_wf_assign_rule) | | Security Classification Group (sn_sec_cmn_classification_group) Classification Group (sn_vul_classification_group) | Classification Group (sn_sec_wf_classification_group) | | Security Classification Rule (sn_sec_cmn_classification_rule) Classification Rule (sn_vul_classification_rule) | Classification Rule (sn_sec_wf_classification_rule) | | Security Calculator Group (sn_sec_cmn_calculator_group) Vulnerability Calculator (sn_vul_calculator_group) | Risk Calculator (sn_sec_calculator_group) | | Security Calculator (sn_sec_cmn_calculator) Vulnerability Calculator Rule (sn_vul_calculator) Vulnerability Risk Rule (sn_vul_calc_risk) | Risk Calculator Rule (sn_sec_calculator_rule) | | Risk rule field (sn_vul_risk_field) | Risk rule field (sn_sec_calculator_risk_field) | | Vulnerability Remediation Status (sn_vul_m2m_ttr_status) | Remediation Status (sn_sec_wf_m2m_ttr_status) | | Remediation Target Rule (sn_vul_ttr_rule) | Remediation Target Rules (sn_sec_wf_ttr_rule) | | Vulnerability Rollup Calculators (sn_vul_rollup) | Rollup config (sn_sec_wf_rollup_config) | | Remediation Task Rule (sn_vul_grouping_rule) Remediation Task Rule (sn_vulc_grouping_rule) | Remediation Task Rule (sn_sec_rem_task_rule) | | Exception Rule (sn_vul_auto_exception_rule) Auto Exception Rules (sn_vulc_auto_exception_rule) | Exception Rules (sn_sec_exception_rule) | | Vulnerability State Change Approval (sn_vul_change_approval) State Change Approval (sn_vulc_state_change_approval) | Change Approval (sn_sec_exception_change_approval) | | Exception Management Configuration (sn_vul_exception_config) Exception Management Configuration (sn_sec_cmn_exception_config) | Exception Management Configuration (sn_sec_exception_config) | | Policy Exception Reason Mapping (sn_sec_cmn_policy_reason_mapping) Policy Exception Reason Mapping (sn_vul_policy_reason_mapping) | Policy Exception Reason Mapping (sn_sec_exception_policy_reason_mapping) | | Questionnaire Configuration (sn_sec_cmn_questionnaire_config) | Questionnaire Configuration (sn_sec_exception_questionnaire_config) | | Vulnerability Compensating Control relationship (sn_vul_m2m_entry_compensating_control) | Vulnerability Compensating Control relationship (sn_vul_cmn_m2m_entry_compensating_control) | [ ] {#sem-migration-prereq-reference-data__table_wtr_bpy_hgc} ## New tables introduced to unify administration features {#sem-migration-prereq-reference-data__section_tkp_3py_hgc} * Assignment Rule (sn_sec_wf_assign_rule) * Classification Group (sn_sec_wf_classification_group) * Classification Rule (sn_sec_wf_classification_rule) * Risk Calculator (sn_sec_calculator_group) * Risk Calculator Rule (sn_sec_calculator_rule) * Risk rule field (sn_sec_calculator_risk_field) * Remediation Target Rules (sn_sec_wf_ttr_rule) * Rollup config (sn_sec_wf_rollup_config) * Approval configuration (sn_sec_cmn_approval_config) * Approver level (sn_sec_cmn_approver_level) * Remediation Task Rule (sn_sec_rem_task_rule) * Auto-close Rule (sn_vul_cmn_auto_close_rule) * Exception Rules (sn_sec_exception_rule) * Change Approval (sn_sec_exception_change_approval) * Exception Management Configuration (sn_sec_exception_config) * Policy Exception Reason Mapping (sn_sec_exception_policy_reason_mapping) * Questionnaire Configuration (sn_sec_exception_questionnaire_config) * Vulnerability Compensating Control relationship (sn_vul_cmn_m2m_entry_compensating_control) * Widget Grouping (sn_sec_sem_widget_grouping) * Widget Aggregation (sn_sec_sem_m2m_widget_dashboard) * Dashboard (sn_sec_sem_dashboard) * Dashboard Widgets (sn_sec_sem_dashboard_widgets) {#sem-migration-prereq-reference-data__ul_k3y_jpy_hgc} ## Security Support Common deprecated tables {#sem-migration-prereq-reference-data__section_dcr_kpy_hgc} * Security Calculator Group (sn_sec_cmn_calculator_group) * Security Calculator (sn_sec_cmn_calculator) * Security Classification Group (sn_sec_cmn_classification_group) * Security Classification Rule (sn_sec_cmn_classification_rule) * Policy Exception Reason Mapping (sn_sec_cmn_policy_reason_mapping) {#sem-migration-prereq-reference-data__ul_eph_npy_hgc} ## Vulnerability Response deprecated tables {#sem-migration-prereq-reference-data__section_nsk_qpy_hgc} * Vulnerability Assignment Rule (sn_vul_assignment_rule) * Vulnerability Calculator (sn_vul_calculator_group) * Vulnerability Calculator Rule (sn_vul_calculator) * Vulnerability Risk Rule (sn_vul_calc_risk) * Risk rule field (sn_vul_risk_field) * Classification Group (sn_vul_classification_group) * Classification Rule (sn_vul_classification_rule) * Vulnerability Remediation Status (sn_vul_m2m_ttr_status) * Remediation Target Rule (sn_vul_ttr_rule) * Vulnerability Rollup Calculators (sn_vul_rollup) * Exception Rule (sn_vul_auto_exception_rule) * Vulnerability State Change Approval (sn_vul_change_approval) * Exception Management Configuration (sn_vul_exception_config) * Vulnerability Compensating Control relationship (sn_vul_m2m_entry_compensating_control) * Policy Exception Reason Mapping (sn_vul_policy_reason_mapping) {#sem-migration-prereq-reference-data__ul_gsq_spy_hgc} ## Vulnerability Response common workspace deprecated table {#sem-migration-prereq-reference-data__section_bby_zpy_hgc} Saved Filters (sn_vul_cmn_ws_saved_filter) ## Configuration Compliance deprecated tables {#sem-migration-prereq-reference-data__section_nrv_cqy_hgc} * Auto Exception Rules (sn_vulc_auto_exception_rule) * State Change Approval (sn_vulc_state_change_approval) {#sem-migration-prereq-reference-data__ul_gjg_fqy_hgc} ## New columns introduced in findings tables {#sem-migration-prereq-reference-data__section_q5f_3qy_hgc} Vulnerable Item \[sn_vul_vulnerable_item\] table. * remediation_plan * remediation_commitment_dt_tm * auto_exception_rule (reference=sn_sec_exception_rule) * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_xxk_4qy_hgc} Application Vulnerable Item \[sn_vul_app_vulnerable_item\] table. * remediation_commitment_dt_tm * status * age_duration * source_risk_score * times_found * first_found_dt_tm * resolution_dt_tm * last_opened_dt_tm * auto_exception_rule (reference=sn_sec_exception_rule) * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_s31_5qy_hgc} Test Result \[sn_vulc_result\] table. * closed_by * first_found_dt_tm * last_found_dt_tm * opened_at * opened_by * resolution_dt_tm * last_state_changed_on * sys_class_name * integration * backup_state * backup_substate * business_criticality * short_description * status * source_risk_score * times_found * close_notes * substate * state_inheritance_count * priority * reopened * remediation_plan * remediation_commitment_dt_tm * auto_exception_rule (reference=sn_sec_exception_rule) * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_fz3_xqy_hgc} Container Vulnerable Item \[sn_vul_container_image_vulnerable_item\] table. * remediation_plan * remediation_commitment_dt_tm * auto_exception_rule (reference=sn_sec_exception_rule) * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_un3_cry_hgc} Remediation task \[sn_vul_vulnerability\] table. * remediation_commitment_dt_tm * remediation_plan * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_igx_hry_hgc} Application Remediation Task \[sn_vul_app_vulnerability\] table. * remediation_commitment_dt_tm * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_bnl_lry_hgc} Remediation task \[sn_vulc_result_group\] table. * remediation_commitment_dt_tm * remediation_plan * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_vlx_rry_hgc} Container Remediation Task \[sn_vul_container_vulnerability\] table. * remediation_commitment_dt_tm * remediation_plan * change_approval (reference=sn_sec_exception_change_approval) * ignore_expiration_for_risk_reduction_dt_tm * ignore_expiration_dt_tm {#sem-migration-prereq-reference-data__ul_j5f_xry_hgc}